Xavier Richert

From Data Analysis to Cybersecurity GRC

Open to Internships & Entry-Level Positions

GRC Portfolio Projects

Hands-on demonstrations of governance, risk, and compliance capabilities developed through practical exercises and homelab implementations.

01

Phishing Analysis Report

Email threat assessment, header analysis, and incident response documentation following SOC analyst procedures.

Incident Response Email Security
View Project →
02

GDPR Compliance Audit

Data protection assessment, gap analysis, and remediation recommendations for a mock European organization.

Compliance GDPR
View Project →
03

Access Control Review

Identity and access management audit, privilege analysis, and least privilege recommendations.

IAM Risk Assessment
View Project →

Why I'm Transitioning to Cybersecurity

For 4+ years as a data analyst, I've worked with sensitive datasets—financial transactions, employee records, research data. Every analysis began with the same questions: Where is this data stored? Who has access? What are the risks if it's compromised? These aren't just data management questions—they're security questions.

My background in mathematics and statistics taught me to think in systems, probabilities, and patterns. When I built fraud detection models that identified $340K in annual losses, I wasn't just analyzing numbers—I was assessing risk, detecting anomalies, and protecting assets. That's what drew me to cybersecurity: the realization that the analytical skills I've honed translate directly into security work.

"Data analysts ask: What does this data tell us? Security professionals ask: How do we protect what this data represents? I've been asking both questions for years—it's time to make security my primary focus."

My teaching experience—explaining complex mathematical concepts to students, including teaching trigonometry in Braille—developed my ability to communicate technical concepts clearly. Security isn't just about technical controls; it's about helping people understand why security matters and how to follow best practices.

The precision I've developed over 20 years playing organ—where a single wrong note disrupts the entire piece—parallels the mindset required in security. A misconfigured access control, an overlooked vulnerability, or a missed compliance requirement can have cascading consequences. Attention to detail isn't optional in security—it's fundamental.

I recently earned my ISC² Certified in Cybersecurity (CC) certification, covering access control, incident response, network security, and data privacy. This formalized what I've been practicing informally: protecting data, assessing risks, and ensuring compliance with regulations like GDPR.

I'm not leaving data analysis behind—I'm applying it to a domain where it's critically needed. Cybersecurity is data-driven: analyzing logs, identifying patterns in network traffic, assessing risk probabilities, measuring compliance metrics. My analytical foundation gives me a unique perspective on governance, risk, and compliance (GRC)—one grounded in data, not just policy.

This career transition isn't a departure—it's a natural evolution. I'm ready to apply my precision, analytical skills, and multilingual capabilities (French, English, German, Hungarian) to helping organizations build secure, compliant systems.

The Fundamental Security Questions

Where is your data?

Understanding data location, storage systems, and infrastructure is the foundation of security architecture.

What kind of data is it?

Classification matters: sensitive, confidential, public—each requires different protection strategies.

Who has access?

Access control is security's backbone. Know who, why, and how—always apply least privilege.

How risky are interactions?

Every data flow introduces risk. Identifying, assessing, and mitigating these risks is constant work.

Career Transition to GRC

After 4+ years as a data analyst at IntelXData, I'm making a deliberate transition into cybersecurity governance, risk, and compliance (GRC).

My analytical background gives me a unique perspective on data protection, risk assessment, and security frameworks. I've worked with sensitive data across financial, research, and medical domains.

I recently earned my ISC² Certified in Cybersecurity (CC) certification, covering access control, incident response, network security, and data privacy fundamentals.

I'm seeking internships, trainee positions, or entry-level roles in GRC, security analysis, or SOC operations in France or Germany.

CREDENTIALS

ISC² Certified in Cybersecurity (CC)
March 2026 · Score: 80%
CERTIFIED
MITx MicroMasters
Statistics & Data Analysis · 2021-2023
POSTGRADUATE
Data Analyst @ IntelXData
Sept 2021-Present · Fraud detection, ML, automation
4+ YEARS
Languages
French (native) · English (native)
German (near-native) · Hungarian (fluent)
MULTILINGUAL

Technical Foundation

Security & GRC

  • Access Control (IAM, RBAC)
  • Incident Response
  • Network Security Basics
  • GDPR Compliance
  • Risk Assessment
  • Security Frameworks (ISC²)

Data & Analytics

  • Python (Pandas, NumPy)
  • R · SAS Advanced · SQL
  • Machine Learning
  • Statistical Modeling
  • Data Visualization
  • Fraud Detection Systems

Professional Skills

  • Analytical Precision
  • Pattern Recognition
  • Technical Documentation
  • Teaching & Communication
  • Cross-functional Collaboration
  • Meticulous Attention to Detail

Let's Build Secure Systems Together

I'm ready to apply my analytical precision to cybersecurity challenges in GRC roles.